A10.08
Error tolerance and graceful degradation
Cards in this group · 7
- A10.08.1Fault tolerance — the system stays recoverable after an error occurs
- A10.08.2Letting an action happen and offering undo beats stopping it with a confirmation dialog
- A10.08.3Confirmation is a last resort, and it decays with frequency
- A10.08.4When a bulk operation partly fails, whatever already succeeded should stay done
- A10.08.5Which functions get sacrificed first under strain should be decided ahead of time, not on the fly
- A10.08.6Before deciding undo windows or confirmations, someone has to enumerate what can't be undone at all
- A10.08.7A five-second undo window fits a typo; a mistaken transfer needs far longer